python3 Redis未授权检测脚本怎么写

这篇文章主要介绍"python3 Redis未授权检测脚本怎么写"，在日常操作中，相信很多人在python3 Redis未授权检测脚本怎么写问题上存在疑惑，小编查阅了各式资料，整理出简单好用的操作方法，希望对大家解答"python3 Redis未授权检测脚本怎么写"的疑惑有所帮助！接下来，请跟着小编一起来学习吧！

import sysimport getoptimport socketdef get_target():    opts, args = getopt.getopt(sys.argv[1:], '-i:-p:-h')    # print(opts)    for opt_name, opt_value in opts:        if opt_name == '-h':            print('[*]This is help information            [*]n'                  '[*]-i + vulnerable-ip                  [*]n'                  '[*]-p + vulnerable-port                [*]n'                  '[*]Example:python3 -i 127.0.0.1 -p 6379[*]n')        if opt_name in ('-i', ):            ip = opt_value        if opt_name in ('-p', ):            port = opt_value    return ip, portdef passwd_dict():    passwd = ['redis@123', 'Redis@123', 'Passw0rd', '123456']    return passwddef main(ip, port, passwd):    print("[*]Redis Unauthorized and Weak Password Detection  [*]n"          "[*]By: Zh1z3ven                                    [*]n"          "[*]Blog: https://www.cnblogs.com/Zh1z3ven/         [*]n")    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)    s.connect((ip, int(port)))    send_data = 'INFOrn'    s.send(send_data.encode())    res = s.recv(1024)    response = bytes.decode(res)    # print(response)    if 'redis_version' in response:        result = '[!]Vulnerable {0}:{1} 存在未授权访问  [!]'.format(ip, port)        print(result)        return result    elif 'NOAUTH' in response:        for item in passwd:            s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)            s.connect((ip, int(port)))            send_data = 'AUTH {0}rn'.format(item)            s.send(send_data.encode())            res = s.recv(1024)            response = bytes.decode(res)            # print(response)            if '+OK' in response:                result = '[!]Vulnerable: {0}:{1} 存在弱口令{2} [!]'.format(ip, port, item)                print(result)                return result            else:                result = '[*] 不存在未授权及弱口令 [*]'                print(result)                return resultif __name__ == '__main__':    ip, port = get_target()    passwd = passwd_dict()    main(ip, port, passwd)

到此，关于"python3 Redis未授权检测脚本怎么写"的学习就结束了，希望能够解决大家的疑惑。理论与实践的搭配能更好的帮助大家学习，快去试试吧！若想继续学习更多相关知识，请继续关注网站，小编会继续努力为大家带来更多实用的文章！